Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File:                     6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier:          0CvKsUcFnWl2EW+5+76roPJnJuZPDtQOj6H4HIxC2M0=
Subject key identifier:   26:2D:44:64:CC:A7:19:99:7D:76:60:FF:A8:FE:3A:6F:AF:E5:31:A3
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer:       /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial:       019883560FE375BCC8C10632B94149136AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number:          0511
Signing time:             Thu 07 Aug 2025 07:01:51 +0000
Manifest this update:     Thu 07 Aug 2025 07:01:51 +0000
Manifest next update:     Fri 08 Aug 2025 07:01:51 +0000
Files and hashes:         1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: wzMYMkpHic01UO4afXUyxCUs8931tbFbHai9VH+yqd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:56:0f:e3:75:bc:c8:c1:06:32:b9:41:49:13:6a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
        Validity
            Not Before: Aug  7 07:01:51 2025 GMT
            Not After : Aug  8 07:01:51 2025 GMT
        Subject: CN=262d4464cca719997d7660ffa8fe3a6fafe531a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:78:6c:a1:ef:92:33:d2:ee:7e:a6:61:4d:
                    c4:f8:14:61:e7:12:8a:85:62:c5:8d:63:72:11:6c:
                    c2:76:d0:4e:65:de:c8:09:54:15:df:e2:18:5a:11:
                    8b:16:bf:64:fc:ea:e6:41:a4:47:27:5d:cb:16:97:
                    ff:be:75:29:e4:01:6a:d8:a7:fa:d6:8f:8b:1a:b5:
                    6e:0d:0c:9c:83:4b:15:5b:f2:e5:71:ce:ba:3d:00:
                    ba:d6:9e:22:2e:e5:59:3c:7c:bd:9d:0e:de:0e:34:
                    19:54:2f:d6:90:8c:e0:f0:c1:8c:ba:ec:c4:f9:2a:
                    2e:58:de:88:37:c4:ba:e8:d5:06:83:d7:91:3f:e0:
                    c4:0b:58:2d:92:71:69:3d:da:47:c3:0e:54:56:b5:
                    0a:e3:26:ee:e6:73:8d:14:ec:ea:a8:1e:aa:98:14:
                    8a:bf:bd:b7:b8:64:81:44:60:91:ae:d6:9b:66:5e:
                    b4:40:53:e8:2e:ef:eb:70:c1:41:77:b5:b9:46:c8:
                    1e:c4:9b:08:e9:93:cc:81:ba:cb:55:5b:49:cc:1f:
                    ac:04:a4:dd:bb:2a:b0:8f:78:4d:d2:5f:6f:fc:e3:
                    da:ad:33:09:d2:83:50:5d:bb:cb:9d:53:72:13:6e:
                    5f:c8:f8:94:d1:18:40:5c:76:52:6d:20:55:db:0e:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:44:64:CC:A7:19:99:7D:76:60:FF:A8:FE:3A:6F:AF:E5:31:A3
            X509v3 Authority Key Identifier:
                keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:95:6f:9f:45:af:f4:e3:69:ea:72:9b:54:0b:af:73:13:
         4f:c4:99:33:71:70:ca:66:5f:62:28:af:8e:f8:5b:a6:d1:63:
         f5:d7:03:58:cb:c1:2d:6a:fe:52:3a:c7:0e:5a:80:71:82:da:
         f2:60:5a:39:4a:7f:35:99:8c:95:ef:73:dd:16:0a:66:fe:15:
         13:41:c4:4a:ee:8d:5e:1a:c9:27:d8:b6:6f:a4:b0:ae:82:61:
         5d:ca:16:54:6f:2b:10:a7:db:d6:39:d5:9e:bb:cf:61:f7:62:
         00:dc:33:96:f3:c0:1f:91:a4:6a:c3:c2:de:48:d4:33:de:eb:
         e8:03:11:cf:35:9e:3d:8f:54:b6:d2:b4:f6:92:40:25:39:ef:
         b0:35:f5:09:50:8e:79:cb:98:5c:f4:3e:5e:9b:96:5b:b4:28:
         31:83:76:52:65:8d:4c:09:18:4b:a6:56:eb:29:f4:26:4d:c0:
         49:39:b9:31:7e:ed:cc:01:64:5d:42:16:df:ed:42:a7:25:0f:
         78:4a:13:49:75:58:6c:2c:e5:f7:e8:9f:f1:ec:43:15:63:4b:
         8e:ff:48:82:93:33:b9:e6:a4:f1:9d:d7:b7:c2:75:71:8f:9e:
         d4:0c:a3:db:ff:38:5b:e6:0b:db:e1:d0:32:91:64:46:26:b2:
         5d:02:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:06:48 2025 by rpki-client